The article says it clearly:
> The models themselves may contain malware or other security vulnerabilities.
And the article must clearly be the whole truth and nothing but the truth.
The weights contain malware? What security vulnerability do they contain? Is the claim that they will write insecure code? This seems easy enough to test - run a sufficiently large sample through another LLM
That's true in the sense that it's true for every single model.